Attachment 1446266 Details for Bug 1584680 – File: backtrace

File: backtrace

backtrace (text/plain), 12.71 KB, created by deadrat on 2018-05-31 12:41:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: deadrat

Created: 2018-05-31 12:41:51 UTC

Size: 12.71 KB

patch

obsolete

>[New LWP 2029]
>[New LWP 2032]
>[New LWP 2067]
>[New LWP 2035]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/gsd-housekeeping'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  0x00007faf4c8379b9 in notify_notification_close (notification=0x7faf300020c0, error=0x14) at notification.c:1091
>[Current thread is 1 (Thread 0x7faf4d754580 (LWP 2029))]
>
>Thread 1 (Thread 0x7faf4d754580 (LWP 2029)):
>#0  0x00007faf4c8379b9 in notify_notification_close (notification=0x7faf300020c0, error=0x14) at notification.c:1091
>        _g_boolean_var_ = <optimized out>
>        priv = <optimized out>
>        proxy = <optimized out>
>        result = <optimized out>
>        __func__ = "notify_notification_close"
>#1  0x0000556850cfa89c in gsd_ldsm_clean () at ../plugins/housekeeping/gsd-disk-space.c:1020
>        _pp = {in = 0x556850efe2b0 <notification> "", out = 0x556850efe2b0 <notification>}
>        _p = <optimized out>
>        _destroy = <optimized out>
>#2  0x0000556850cf8c19 in main (argc=<optimized out>, argv=<optimized out>) at ../plugins/common/daemon-skeleton.h:222
>        error = 0x0
>        context = <optimized out>
>        loop = 0x5568525677d0
>
>Thread 2 (Thread 0x7faf3d458700 (LWP 2032)):
>#0  0x00007faf4c34b559 in fts_load (sp=0xffffffff, sp=0xffffffff, p=0x55685256d100) at ../sysdeps/wordsize-64/../../io/fts.c:247
>        len = <optimized out>
>        cp = <optimized out>
>        len = <optimized out>
>        cp = <optimized out>
>#1  fts_read (sp=0xffffffff) at ../sysdeps/wordsize-64/../../io/fts.c:422
>        p = 0x55685256d100
>        tmp = <optimized out>
>        instr = <optimized out>
>        t = <optimized out>
>        saved_errno = <optimized out>
>#2  0x00007faf4ca87be6 in g_main_context_pop_thread_default () from /lib64/libglib-2.0.so.0
>No symbol table info available.
>#3  0x39039b263db57f00 in ?? ()
>No symbol table info available.
>#4  0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 3 (Thread 0x7faf377fe700 (LWP 2067)):
>#0  0x00007faf4c34b559 in fts_load (sp=0xffffffff, sp=0xffffffff, p=0x556852598590) at ../sysdeps/wordsize-64/../../io/fts.c:247
>        len = <optimized out>
>        cp = <optimized out>
>        len = <optimized out>
>        cp = <optimized out>
>#1  fts_read (sp=0xffffffff) at ../sysdeps/wordsize-64/../../io/fts.c:422
>        p = 0x556852598590
>        tmp = <optimized out>
>        instr = <optimized out>
>        t = <optimized out>
>        saved_errno = <optimized out>
>#2  0x00007faf4ca87be6 in g_main_context_pop_thread_default () from /lib64/libglib-2.0.so.0
>No symbol table info available.
>#3  0x39039b263db57f00 in ?? ()
>No symbol table info available.
>#4  0x00007ffc917e8cb0 in ?? ()
>No symbol table info available.
>#5  0x0000556852598490 in ?? ()
>No symbol table info available.
>#6  0x0000000000000001 in ?? ()
>No symbol table info available.
>#7  0x00007ffc917e8c2e in ?? ()
>No symbol table info available.
>#8  0x00007ffc917e8c2f in ?? ()
>No symbol table info available.
>#9  0x00007ffc917e8cb0 in ?? ()
>No symbol table info available.
>#10 0x00007ffc917e8cb0 in ?? ()
>No symbol table info available.
>#11 0x00007faf4ca87d10 in g_main_context_wait () from /lib64/libglib-2.0.so.0
>No symbol table info available.
>#12 0x00007faf377fe700 in ?? ()
>No symbol table info available.
>#13 0x00007faf377fe700 in ?? ()
>No symbol table info available.
>#14 0xa372960f2abba3d5 in ?? ()
>No symbol table info available.
>#15 0x00007ffc917e8c2e in ?? ()
>No symbol table info available.
>#16 0x00007ffc917e8c2f in ?? ()
>No symbol table info available.
>#17 0x00007ffc917e8cb0 in ?? ()
>No symbol table info available.
>#18 0x00007ffc917e8cb0 in ?? ()
>No symbol table info available.
>#19 0x5c2cf8f0913ba3d5 in ?? ()
>No symbol table info available.
>#20 0x5c2c00b9400da3d5 in ?? ()
>No symbol table info available.
>#21 0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 4 (Thread 0x7faf37fff700 (LWP 2035)):
>#0  0x00007faf4c34b559 in fts_load (sp=0xffffffff, sp=0xffffffff, p=0x5568525885b0) at ../sysdeps/wordsize-64/../../io/fts.c:247
>        len = <optimized out>
>        cp = <optimized out>
>        len = <optimized out>
>        cp = <optimized out>
>#1  fts_read (sp=0xffffffff) at ../sysdeps/wordsize-64/../../io/fts.c:422
>        p = 0x5568525885b0
>        tmp = <optimized out>
>        instr = <optimized out>
>        t = <optimized out>
>        saved_errno = <optimized out>
>#2  0x00007faf4ca87be6 in g_main_context_pop_thread_default () from /lib64/libglib-2.0.so.0
>No symbol table info available.
>#3  0x39039b263db57f00 in ?? ()
>No symbol table info available.
>#4  0x00007ffc917e8e0f in ?? ()
>No symbol table info available.
>#5  0x0000556852586660 in ?? ()
>No symbol table info available.
>#6  0x000055685258666c in ?? ()
>No symbol table info available.
>#7  0x00007ffc917e8e0e in ?? ()
>No symbol table info available.
>#8  0x00007ffc917e8e0f in ?? ()
>No symbol table info available.
>#9  0x00007ffc917e8e90 in ?? ()
>No symbol table info available.
>#10 0x00007ffc917e8e90 in ?? ()
>No symbol table info available.
>#11 0x00007faf4ca87fa2 in g_main_context_prepare () from /lib64/libglib-2.0.so.0
>No symbol table info available.
>#12 0x5c2c00b9400da3d5 in ?? ()
>No symbol table info available.
>#13 0x0000000000000000 in ?? ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007faf4d350970  0x00007faf4d35845e  Yes         /usr/lib64/gnome-settings-daemon-3.0/libgsd.so
>0x00007faf4cfdd4b0  0x00007faf4d0c4dc2  Yes (*)     /lib64/libgio-2.0.so.0
>0x00007faf4cd5d7a0  0x00007faf4cd8e5b0  Yes (*)     /lib64/libgobject-2.0.so.0
>0x00007faf4ca570d0  0x00007faf4cad20ae  Yes (*)     /lib64/libglib-2.0.so.0
>0x00007faf4c835850  0x00007faf4c837c83  Yes         /lib64/libnotify.so.4
>0x00007faf4c61dad0  0x00007faf4c62e6a5  Yes (*)     /lib64/libgcc_s.so.1
>0x00007faf4c27d390  0x00007faf4c3c451f  Yes         /lib64/libc.so.6
>0x00007faf4c0523c0  0x00007faf4c0572d5  No          /lib64/libwayland-client.so.0
>0x00007faf4be45810  0x00007faf4be4a29a  Yes         /lib64/libffi.so.6
>0x00007faf4bc41140  0x00007faf4bc42066  Yes (*)     /lib64/libgmodule-2.0.so.0
>0x00007faf4ba3cee0  0x00007faf4ba3dbae  Yes         /lib64/libdl.so.2
>0x00007faf4b7cc660  0x00007faf4b81cb86  Yes         /lib64/libpcre.so.1
>0x00007faf4b5b1b90  0x00007faf4b5bf7f1  Yes         /lib64/libpthread.so.0
>0x00007faf4b397420  0x00007faf4b3a45f7  Yes (*)     /lib64/libz.so.1
>0x00007faf4b172df0  0x00007faf4b18a7ff  Yes         /lib64/libselinux.so.1
>0x00007faf4af58840  0x00007faf4af6465e  Yes         /lib64/libresolv.so.2
>0x00007faf4ad07ee0  0x00007faf4ad3f25e  No          /lib64/libmount.so.1
>0x00007faf4aada5f0  0x00007faf4aaf0b4d  Yes         /lib64/libgdk_pixbuf-2.0.so.0
>0x00007faf4d560f60  0x00007faf4d57d980  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007faf4a8cd1c0  0x00007faf4a8d044c  Yes         /lib64/librt.so.1
>0x00007faf4a5429f0  0x00007faf4a5f4f5a  Yes         /lib64/libm.so.6
>0x00007faf4a2b9160  0x00007faf4a313cb3  Yes         /lib64/libpcre2-8.so.0
>0x00007faf4a0706f0  0x00007faf4a0a127e  No          /lib64/libblkid.so.1
>0x00007faf49e60740  0x00007faf49e64171  No          /lib64/libuuid.so.1
>0x00007faf49c305a0  0x00007faf49c52a05  Yes         /lib64/libpng16.so.16
>0x00007faf3c24dce0  0x00007faf3c252e12  Yes         /usr/lib64/gio/modules/libdconfsettings.so
>                                        No          /usr/lib64/gio/modules/libgvfsdbus.so
>                                        No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007faf36bbce80  0x00007faf36bbd7a8  Yes         /lib64/libutil.so.1
>(*): Shared library is missing debugging information.
>$1 = 0x0
>$2 = 0x0
>rax            0x556852596b50	93906546551632
>rbx            0x7faf300020c0	140390401319104
>rcx            0x556852586dc0	93906546486720
>rdx            0x5568525a08d0	93906546591952
>rsi            0x14	20
>rdi            0x7faf300020c0	140390401319104
>rbp            0x14	0x14
>rsp            0x7ffc917e91e0	0x7ffc917e91e0
>r8             0x4	4
>r9             0x556852559bd0	93906546301904
>r10            0xf	15
>r11            0x50	80
>r12            0x55685257f090	93906546454672
>r13            0x7ffc917e9320	140722749477664
>r14            0x0	0
>r15            0x0	0
>rip            0x7faf4c8379b9	0x7faf4c8379b9 <notify_notification_close+57>
>eflags         0x10206	[ PF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function notify_notification_close:
>   0x00007faf4c837980 <+0>:	endbr64 
>   0x00007faf4c837984 <+4>:	push   %r12
>   0x00007faf4c837986 <+6>:	push   %rbp
>   0x00007faf4c837987 <+7>:	mov    %rsi,%rbp
>   0x00007faf4c83798a <+10>:	push   %rbx
>   0x00007faf4c83798b <+11>:	mov    %rdi,%rbx
>   0x00007faf4c83798e <+14>:	callq  0x7faf4c835800 <notify_notification_get_type@plt>
>   0x00007faf4c837993 <+19>:	test   %rbx,%rbx
>   0x00007faf4c837996 <+22>:	je     0x7faf4c8379e8 <notify_notification_close+104>
>   0x00007faf4c837998 <+24>:	mov    (%rbx),%rdx
>   0x00007faf4c83799b <+27>:	test   %rdx,%rdx
>   0x00007faf4c83799e <+30>:	je     0x7faf4c8379a5 <notify_notification_close+37>
>   0x00007faf4c8379a0 <+32>:	cmp    %rax,(%rdx)
>   0x00007faf4c8379a3 <+35>:	je     0x7faf4c8379b4 <notify_notification_close+52>
>   0x00007faf4c8379a5 <+37>:	mov    %rax,%rsi
>   0x00007faf4c8379a8 <+40>:	mov    %rbx,%rdi
>   0x00007faf4c8379ab <+43>:	callq  0x7faf4c835720 <g_type_check_instance_is_a@plt>
>   0x00007faf4c8379b0 <+48>:	test   %eax,%eax
>   0x00007faf4c8379b2 <+50>:	je     0x7faf4c8379e8 <notify_notification_close+104>
>   0x00007faf4c8379b4 <+52>:	test   %rbp,%rbp
>   0x00007faf4c8379b7 <+55>:	je     0x7faf4c837a10 <notify_notification_close+144>
>=> 0x00007faf4c8379b9 <+57>:	cmpq   $0x0,0x0(%rbp)
>   0x00007faf4c8379be <+62>:	je     0x7faf4c837a10 <notify_notification_close+144>
>   0x00007faf4c8379c0 <+64>:	lea    0x759(%rip),%rdx        # 0x7faf4c838120
>   0x00007faf4c8379c7 <+71>:	lea    0x8a2(%rip),%rsi        # 0x7faf4c838270 <__func__.27103>
>   0x00007faf4c8379ce <+78>:	lea    0x2dc(%rip),%rdi        # 0x7faf4c837cb1
>   0x00007faf4c8379d5 <+85>:	callq  0x7faf4c835520 <g_return_if_fail_warning@plt>
>   0x00007faf4c8379da <+90>:	pop    %rbx
>   0x00007faf4c8379db <+91>:	xor    %eax,%eax
>   0x00007faf4c8379dd <+93>:	pop    %rbp
>   0x00007faf4c8379de <+94>:	pop    %r12
>   0x00007faf4c8379e0 <+96>:	retq   
>   0x00007faf4c8379e1 <+97>:	nopl   0x0(%rax)
>   0x00007faf4c8379e8 <+104>:	lea    0x6e1(%rip),%rdx        # 0x7faf4c8380d0
>   0x00007faf4c8379ef <+111>:	lea    0x87a(%rip),%rsi        # 0x7faf4c838270 <__func__.27103>
>   0x00007faf4c8379f6 <+118>:	lea    0x2b4(%rip),%rdi        # 0x7faf4c837cb1
>   0x00007faf4c8379fd <+125>:	callq  0x7faf4c835520 <g_return_if_fail_warning@plt>
>   0x00007faf4c837a02 <+130>:	pop    %rbx
>   0x00007faf4c837a03 <+131>:	xor    %eax,%eax
>   0x00007faf4c837a05 <+133>:	pop    %rbp
>   0x00007faf4c837a06 <+134>:	pop    %r12
>   0x00007faf4c837a08 <+136>:	retq   
>   0x00007faf4c837a09 <+137>:	nopl   0x0(%rax)
>   0x00007faf4c837a10 <+144>:	mov    %rbp,%rdi
>   0x00007faf4c837a13 <+147>:	mov    0x18(%rbx),%r12
>   0x00007faf4c837a17 <+151>:	callq  0x7faf4c835ae0 <_notify_get_proxy>
>   0x00007faf4c837a1c <+156>:	mov    %rax,%rbx
>   0x00007faf4c837a1f <+159>:	test   %rax,%rax
>   0x00007faf4c837a22 <+162>:	je     0x7faf4c837a78 <notify_notification_close+248>
>   0x00007faf4c837a24 <+164>:	mov    (%r12),%esi
>   0x00007faf4c837a28 <+168>:	lea    0x4cb(%rip),%rdi        # 0x7faf4c837efa
>   0x00007faf4c837a2f <+175>:	xor    %eax,%eax
>   0x00007faf4c837a31 <+177>:	callq  0x7faf4c835730 <g_variant_new@plt>
>   0x00007faf4c837a36 <+182>:	sub    $0x8,%rsp
>   0x00007faf4c837a3a <+186>:	xor    %ecx,%ecx
>   0x00007faf4c837a3c <+188>:	xor    %r9d,%r9d
>   0x00007faf4c837a3f <+191>:	push   %rbp
>   0x00007faf4c837a40 <+192>:	mov    %rax,%rdx
>   0x00007faf4c837a43 <+195>:	mov    $0xffffffff,%r8d
>   0x00007faf4c837a49 <+201>:	mov    %rbx,%rdi
>   0x00007faf4c837a4c <+204>:	lea    0x590(%rip),%rsi        # 0x7faf4c837fe3
>   0x00007faf4c837a53 <+211>:	callq  0x7faf4c835760 <g_dbus_proxy_call_sync@plt>
>   0x00007faf4c837a58 <+216>:	pop    %rdx
>   0x00007faf4c837a59 <+217>:	pop    %rcx
>   0x00007faf4c837a5a <+218>:	test   %rax,%rax
>   0x00007faf4c837a5d <+221>:	je     0x7faf4c837a78 <notify_notification_close+248>
>   0x00007faf4c837a5f <+223>:	mov    %rax,%rdi
>   0x00007faf4c837a62 <+226>:	callq  0x7faf4c8353f0 <g_variant_unref@plt>
>   0x00007faf4c837a67 <+231>:	pop    %rbx
>   0x00007faf4c837a68 <+232>:	mov    $0x1,%eax
>   0x00007faf4c837a6d <+237>:	pop    %rbp
>   0x00007faf4c837a6e <+238>:	pop    %r12
>   0x00007faf4c837a70 <+240>:	retq   
>   0x00007faf4c837a71 <+241>:	nopl   0x0(%rax)
>   0x00007faf4c837a78 <+248>:	pop    %rbx
>   0x00007faf4c837a79 <+249>:	xor    %eax,%eax
>   0x00007faf4c837a7b <+251>:	pop    %rbp
>   0x00007faf4c837a7c <+252>:	pop    %r12
>   0x00007faf4c837a7e <+254>:	retq   
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1584680: 1446266 | 1446267 | 1446268 | 1446269 | 1446270 | 1446271 | 1446272 | 1446273 | 1446274 | 1446275 | 1446276 | 1446277 | 1483301